We claim: 

5^ /'fX ^ validation protocol for determining whether an untrusted authentication chip is 
valia, or noK including the steps of: 

generating a random number and encrypting it with an asymmetric encryption function 
5 using a first key; 

passing the eherypted random number to an untrusted authentication chip; 

decrypting the encrypted random number with an asymmetric decryption function using 
a secret key, in the untrusted authentication chip; 

comparing the decrypted random number with the original random number, and in the 
10 event of a match considering tn& untrusted chip to be valid; 

otherwise considering the untrusted chip to be invalid. 

2. A validation protoco\according to claim 1, where the random number is not 
secret, but where the trusted authentication chip contains a random function to produce random 
numbers from a seed, and the function advances after every random number is produced so that 

15 the next random number will be produced frata a new seed. 

3. A validation protocol according tcxclaim 1 , where the first key is a public key. 

4. A validation protocol according to ci^im 1, where the encryption is implemented 
in software. 

5. A validation protocol according to claim \, where the encryption is implemented 
20 in a second authentication chip. 

6. A validation protocol according to claim 1 , wti^re the keys used for encryption 
and decryption are 2048 bits or larger. 

7. A validation system for performing the method according to claim 1 , where the 
system includes a random number generator, an asymmetric encryjsrtor to encrypt generated 

25 random numbers and a first key for the encryptor, and an untrusted authentication chip; the 
untrusted chip includes an asymmetric decryption function to decrypts encrypted random 
numbers and a secret key for the decryption function; a comparison means arte also provided to 
compare a decrypted random number with an original random number, and in\the event of a 
match considering the untrusted chip to be valid; otherwise considering the untrusted chip to be 

30 invalid. 

8. A validation system according to claim 7, where the random number geh^rator, 
encryptor and comparison means are in an external system. 
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9. \ A validation system according to claim 8, where the external system is in a 
device in whibh are mounted, and the untrusted chip is in the consumable. 

10. XValidation system according to claim 7, where the random number generator 
and encryptor are iira second authentication chip, and the comparison means are in an external 
system which receives \he random number and the encrypted version before passing only the 
encrypted version to the untrusted chip; the system also receives back the decrypted version 
from the untrusted chip and performs the comparison. 

11. A validation system according to claim 10, where the system is in a device in 
which consumables are mounted, and the untrusted chip is in the consumable. 

12. A validation system acs^prding to claim 7, where the random number is not 
secret, but the random number generator includes a random function to produce random 
numbers from a seed, and the function advantes after every random number is produced so that 
the next random number will be produced from\new seed. 

13. A validation system according to claim 7, where the first key is a public key. 

14. A validation system according to claim/7, where the encryption is implemented 
in software. \ 

15. A validation system according to claim 7, where the encryption is implemented 
in a second authentication chip. \ 

16. A validation system according to claim 7, where the^keys used for encryption and 
decryption are 2048 bits or larger. \ 
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